promo-video
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto executeffmpegandffprobefor audio processing and video rendering inscripts/generate_voiceover.pyandSKILL.md. - [COMMAND_EXECUTION]: It invokes
npmandnpxcommands (e.g.,create-video,remotion studio) to initialize and manage the video project. - [EXTERNAL_DOWNLOADS]: Fetches synthesized audio from the ElevenLabs API using
urllib.request.urlopeninscripts/generate_voiceover.py. - [EXTERNAL_DOWNLOADS]: Recommends downloading royalty-free background music from well-known services like Pixabay and Bensound via
curlas part of the setup workflow. - [EXTERNAL_DOWNLOADS]: Automates the installation of necessary dependencies such as
openai-whisperviapipandlucide-reactvianpm. - [DATA_EXFILTRATION]: Transmits the user-defined voiceover script and the user's ElevenLabs API key to
api.elevenlabs.iofor text-to-speech generation, which is the primary intended functionality. - [PROMPT_INJECTION]: The skill analyzes local project metadata (e.g.,
git log,README.md) to generate video content suggestions, creating a surface for indirect prompt injection from malicious files within a repository. - Ingestion points: The skill reads the output of
git log --oneline -100and the first 30 lines ofREADME.mdto define product context. - Boundary markers: No explicit delimiters or instructions are used to separate ingested file content from agent instructions.
- Capability inventory: Access to
Bash(includingffmpeg,pip,npm), file systemRead/Write, and network operations. - Sanitization: No sanitization of the analyzed repository content is performed before it is processed by the agent.
Audit Metadata